Cisco ASA ICV Checksum IPSec/IKEv2 Message Content Modification Vulnerability

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A security vulnerability exists in the Cisco Adaptive Security Appliance due to the AES-GCM code of the Cavium Networks cryptographic module component of the program failin...

Cisco Adaptive Security Appliance Encrypted IPSec or IKEv2 Packet Modification Vulnerability

A vulnerability in the AES-GCM code of Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to modify the contents of an encrypted IPSec or IKEv2 packet, and for those modifications not to be detected. The vulnerability is due to an error on the firmware of the...

PT-2015-1409 · Cavium +1 · Cavium Cryptographic-Module +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA versions 9.33 through 9.41.1 Description: The issue is related to errors in cryptographic transformations in the Cisco ASA cryptographic module. This could allow a remote attacker to gain access to traffi...

Authentication flaw

The IKEv1 implementation in Cisco ASA Software 7.x, 8.0.x, 8.1.x, and 8.2.x before 8.2.2.13 allows remote authenticated users to bypass XAUTH authentication via crafted IKEv1 packets, aka Bug ID CSCus47259...

CVE-2015-0760

The IKEv1 implementation in Cisco ASA Software 7.x, 8.0.x, 8.1.x, and 8.2.x before 8.2.2.13 allows remote authenticated users to bypass XAUTH authentication via crafted IKEv1 packets, aka Bug ID CSCus47259...

CVE-2015-0760

The IKEv1 implementation in Cisco ASA Software 7.x, 8.0.x, 8.1.x, and 8.2.x before 8.2.2.13 allows remote authenticated users to bypass XAUTH authentication via crafted IKEv1 packets, aka Bug ID CSCus47259...

CVE-2015-0760

Cisco ASA Software versions 7.x, 8.0.x, 8.1.x, and 8.2.x before 8.2.2.13 contain a vulnerability in the IKEv1 code that can be exploited by an authenticated, remote attacker to bypass XAUTH authentication via crafted IKEv1 packets. The issue (Bug CSCus47259) allows bypass of Extended Authenticati...

Cisco Adaptive Security Appliance XAUTH Bypass Vulnerability

A vulnerability in Internet Key Exchange IKE version 1 v1 code of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to bypass Extended Authentication XAUTH and successfully log in via IPsec remote VPN. The vulnerability is due to improper implementation ...

Cisco ASA Software Failover Command Injection Vulnerability (cisco-sa-20150408-asa)

Cisco ASA is prone to a failover command injection vulnerability. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Cisco ASA VPN XML Parser DoS Vulnerability (cisco-sa-20150408-asa)

Cisco ASA is prone to a DoS vulnerability in the VPN XML Parser. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Cisco ASA DNS Memory Exhaustion Vulnerability (cisco-sa-20150408-asa)

Cisco ASA is prone to a DNS memory exhaustion vulnerability. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

CVE-2015-0742

The Protocol Independent Multicast PIM application in Cisco Adaptive Security Appliance ASA Software 9.20.0, 9.20.104, 9.23.1, 9.23.4, 9.31.105, 9.32.100, 9.40.115, 100.130.21, 100.1320.3, 100.1321.9, and 100.141.1 does not properly implement multicast-forwarding registration, which allows remote...

Design/Logic Flaw

The Protocol Independent Multicast PIM application in Cisco Adaptive Security Appliance ASA Software 9.20.0, 9.20.104, 9.23.1, 9.23.4, 9.31.105, 9.32.100, 9.40.115, 100.130.21, 100.1320.3, 100.1321.9, and 100.141.1 does not properly implement multicast-forwarding registration, which allows remote...

CVE-2015-0742

The Protocol Independent Multicast PIM application in Cisco Adaptive Security Appliance ASA Software 9.20.0, 9.20.104, 9.23.1, 9.23.4, 9.31.105, 9.32.100, 9.40.115, 100.130.21, 100.1320.3, 100.1321.9, and 100.141.1 does not properly implement multicast-forwarding registration, which allows remote...

CVE-2015-0742

The CVE describes a DoS in Cisco ASA’s Protocol Independent Multicast (PIM) forwarding due to improper multicast-forwarding registration. Affected Cisco ASA Software versions include 9.2(0.0)–9.4(0.115) and 100.13(0.21)–100.14(1.1). The issue (Bug CSCus74398) allows remote attackers to disrupt mu...

PT-2015-1381 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 9.20.0 through 9.40.115 Cisco Adaptive Security Appliance ASA Software versions 100.130.21 through 100.141.1 Description: The issue is related to the Protocol Independent Multicast PIM...

The vulnerability of the microprogramming software of the Cisco ASA security device allows a remote attacker to induce a maintenance failure.

The vulnerability of the microprogramming software of the Cisco ASA security device in the XML processing module when using Clientless SSL VPN, AnyConnect SSL VPN, or AnyConnect IKEv2 VPN allows a malicious actor to trigger a service failure a malfunction in the VPN operation or a system restart ...

Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20150408-asa)

The remote Cisco Adaptive Security Appliance ASA is missing a vendor-supplied security patch and is therefore affected by the following vulnerabilities : - A flaw exists in the failover ipsec feature due to not properly handling failover communication messages. An unauthenticated attacker, sendin...

CVE-2015-0677

The XML parser in Cisco Adaptive Security Appliance ASA Software 8.4 before 8.47.28, 8.6 before 8.61.17, 9.0 before 9.04.33, 9.1 before 9.16, 9.2 before 9.23.4, and 9.3 before 9.33, when Clientless SSL VPN, AnyConnect SSL VPN, or AnyConnect IKEv2 VPN is used, allows remote attackers to cause a...

CVE-2015-0676

The DNS implementation in Cisco Adaptive Security Appliance ASA Software 7.2 before 7.25.16, 8.2 before 8.25.57, 8.3 before 8.32.44, 8.4 before 8.47.28, 8.5 before 8.51.24, 8.6 before 8.61.17, 8.7 before 8.71.16, 9.0 before 9.04.33, 9.1 before 9.16.1, 9.2 before 9.23.4, and 9.3 before 9.33 allows...